IM Lock 2006 - Insecure Registry Permission Vulnerability

IM Lock 2006 - Insecure Registry Permission Vulnerability --------------------------------------------------------- Application: IM Lock 2006 Vendor: www.comvigo.com Corporation: Comvigo, Inc. Version: Latest: 2 March 2006 - Home Edition, Enterprise & Professional Description: IM Lock 2006...

[SA19077] M4 Project enigma-suite Default Account Password Weakness

TITLE: M4 Project enigma-suite Default Account Password Weakness SECUNIA ADVISORY ID: SA19077 VERIFY ADVISORY: http://secunia.com/advisories/19077/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system SOFTWARE: M4 Project enigma-suite 0.x http://secunia.com/product/8470/ DESCRIPTIO...

CVE-2006-0898

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector IV of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael...

[SA18980] MUTE P2P File Sharing Host Selection Weakness

TITLE: MUTE P2P File Sharing Host Selection Weakness SECUNIA ADVISORY ID: SA18980 VERIFY ADVISORY: http://secunia.com/advisories/18980/ CRITICAL: Not critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: MUTE 0.x http://secunia.com/product/8279/ DESCRIPTION: Gary Whetstone has reported a...

Vulnerability in Crypt::CBC Perl module, versions <= 2.16

Perl Module Security Advisory ------------------------------------------------------------------------------- Title: Crypt::CBC ciphertext weakness when using certain block algorithms Severity: High Versions: All versions = 2.16. Date: 23 February 2006...

NeoMail Session ID Weakness neomail-prefs.pl Arbitrary Mail-folder Manipulation

The remote host is running NeoMail, an open source webmail application written in Perl. The installed version of this software fails to validate the 'sessionid' parameter in the 'neomail-prefs.pl' script as a valid session identifier. An unauthenticated attacker may be able to exploit this issue ...

Wimpy MP3 Player 5 - Text File Overwrite

Wimpy MP3 Player 5 - Text File Overwrite source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The...

Wimpy MP3 Player 5 - Text File Overwrite

source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The following proof of concept URI is available:...

RCBlog index.php post Parameter Traversal Arbitrary File Access

The remote host is running RCBlog, a blog written in PHP. The remote version of this software fails to sanitize user-supplied input to the 'post' parameter of the 'index.php' script. An attacker can use this to access arbitrary files on the remote host provided PHP's 'magicquotes' setting is...

DistCC Daemon Command Execution

This module uses a documented security weakness to execute arbitrary commands on any system running distccd. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DistCC Daemon Command Execution',...

Ubuntu 4.10 / 5.04 / 5.10 : openssl vulnerability (USN-204-1)

Yutaka Oiwa discovered a possible cryptographic weakness in OpenSSL applications. Applications using the OpenSSL library can use the SSLOPMSIESSLV2RSAPADDING option or SSLOPALL, which implies the former to maintain compatibility with third-party products, which is achieved by working around known...

imoelPassword.txt

IMOEL CMS has the weakness to download the plain text sql password in the setting.php file / $setting'host''username' = 'sqlusername'; $setting'host''password' = 'sqlpassword'; so u can download the setting.php file & view the plain text password as the default imoel cms set the administrator use...

IMOEL CMS Sql password discovery

IMOEL CMS has the weakness to download the plain text sql password in the setting.php file / $setting'host''username' = 'sqlusername'; $setting'host''password' = 'sqlpassword'; so u can download the setting.php file & view the plain text password as the default imoel cms set the administrator use...

[SA17700] Novell ZENworks Remote-Diagnostics Access Control Weakness

TITLE: Novell ZENworks Remote-Diagnostics Access Control Weakness SECUNIA ADVISORY ID: SA17700 VERIFY ADVISORY: http://secunia.com/advisories/17700/ CRITICAL: Not critical IMPACT: Security Bypass WHERE: From local network SOFTWARE: Novell ZENworks Desktop Management 6.x...

Multiple Macromedia server products vulnerabilities

Contribute Publishing Server Cryptographic weakness, Breeze Live Server and Flash Communication Server MX malcrafted RTPM streams DoS...

[SECURITY] [DSA 888-1] New OpenSSL packages fix cryptographic weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA 888-1 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 888-1] New OpenSSL packages fix cryptographic weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA 888-1 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...

DSA-888-1 openssl - cryptographic weakness

Bulletin has no description...

[SECURITY] [DSA 882-1] New OpenSSL packages fix cryptographic weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA 882-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 882-1] New OpenSSL packages fix cryptographic weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA 882-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2005 http://www.debian.org/security/faq -...